T1070.003_clear-command-history
In addition to clearing system logs, an adversary may clear the command history of a compromised account to conceal the actions undertaken during an intrusion.
1.21k repo starsObserved in 1 repos
DevOps & Security
DevOps & Security skills
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
T1070.004_file-deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
1.21k repo starsObserved in 1 repos
DevOps & Security
T1070.005_network-share-connection-removal
Adversaries may remove share connections that are no longer useful in order to clean up traces of their operation.
1.21k repo starsObserved in 1 repos
DevOps & Security
T1070.006_timestomp
Adversaries may modify file time attributes to hide new files or changes to existing files.
1.21k repo starsObserved in 1 repos
DevOps & Security
T1070.007_clear-network-connection-history-and-configurations
Adversaries may clear or remove evidence of malicious network connections in order to clean up traces of their operations.
1.21k repo starsObserved in 1 repos
DevOps & Security
T1070.008_clear-mailbox-data
Adversaries may modify mail and mail application data to remove evidence of their activity.
1.21k repo starsObserved in 1 repos
DevOps & Security
T1070.009_clear-persistence
Adversaries may clear artifacts associated with previously established persistence on a host system to remove evidence of their activity.
1.21k repo starsObserved in 1 repos
DevOps & Security
T1070.010_relocate-malware
Once a payload is delivered, adversaries may reproduce copies of the same malware on the victim system to remove evidence of their presence and/or avoid defenses.
1.21k repo starsObserved in 1 repos
DevOps & Security
T1071.001_web-protocols
Adversaries may communicate using application layer protocols associated with web traffic to avoid detection/network filtering by blending in with existing traffic.
1.21k repo starsObserved in 1 repos
DevOps & Security
T1071.002_file-transfer-protocols
Adversaries may communicate using application layer protocols associated with transferring files to avoid detection/network filtering by blending in with existing traffic.
1.21k repo starsObserved in 1 repos
DevOps & Security